Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/qTI02kxu-Vgs1RCNkQ_UsobKHQ4.roa
File: qTI02kxu-Vgs1RCNkQ_UsobKHQ4.roa (raw, json)
Hash identifier: zJEoZpSXrcBeQhSFcejEgTFl7cAANDCqhrcxeEknBk0=
Subject key identifier: A9:32:34:DA:4C:6E:F9:58:2C:D5:10:8D:91:0F:D4:B2:86:CA:1D:0E
Certificate issuer: /CN=28c6800d74bc4105b40e77ea085ba026dbeec35f
Certificate serial: 0199BD2A7C701B5651BB6621BCF70897FE6D
Authority key identifier: 28:C6:80:0D:74:BC:41:05:B4:0E:77:EA:08:5B:A0:26:DB:EE:C3:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KMaADXS8QQW0DnfqCFugJtvuw18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/qTI02kxu-Vgs1RCNkQ_UsobKHQ4.roa
Signing time: Tue 07 Oct 2025 05:35:02 +0000
ROA not before: Tue 07 Oct 2025 05:35:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4766
IP address blocks: 45.145.232.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.mft
rsync://rpki.ripe.net/repository/DEFAULT/KMaADXS8QQW0DnfqCFugJtvuw18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:bd:2a:7c:70:1b:56:51:bb:66:21:bc:f7:08:97:fe:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28c6800d74bc4105b40e77ea085ba026dbeec35f
Validity
Not Before: Oct 7 05:35:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a93234da4c6ef9582cd5108d910fd4b286ca1d0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:34:bd:29:cb:a8:fd:2c:7d:c9:8f:8d:c4:1e:
4d:69:28:2a:f6:f4:15:c8:2f:c6:fa:fb:1d:a1:93:
ac:22:93:1b:8b:bd:69:ee:ad:18:e9:c7:0b:56:e3:
29:af:16:9e:ec:b6:1d:f0:75:ea:e3:56:27:00:15:
2e:4e:30:ec:a6:78:ad:c0:70:7d:3a:d3:59:75:ad:
2b:d5:0d:c9:da:c5:cd:5f:46:58:ba:a3:f6:9d:7d:
b9:11:dd:ef:f3:a5:7e:89:b6:2e:7d:fd:9f:f4:7d:
ca:f0:80:16:4c:de:ea:a4:db:bb:b7:cf:0a:e1:d8:
a0:a3:c7:24:09:0e:d0:d2:83:38:b4:02:7d:23:c2:
4d:0e:c4:ef:27:bb:41:25:cb:63:08:a1:3b:9e:a0:
72:61:13:2c:90:e8:17:6c:96:91:60:bc:d5:00:ac:
a6:39:60:e5:d7:d2:f5:f8:38:7b:eb:cf:38:ee:f9:
4a:d8:12:d9:25:0b:9c:45:2b:99:07:b4:c8:5c:a8:
39:42:58:b1:89:e6:76:36:a8:e3:7f:8d:85:6d:f4:
d7:c8:e6:4e:77:16:6c:d5:18:5b:d7:57:d2:60:8b:
07:b9:7f:09:48:fa:fe:f5:bf:9a:9d:20:0d:f5:ac:
58:bb:3b:94:e1:de:59:73:65:63:c9:d1:dc:9b:3d:
8d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:32:34:DA:4C:6E:F9:58:2C:D5:10:8D:91:0F:D4:B2:86:CA:1D:0E
X509v3 Authority Key Identifier:
keyid:28:C6:80:0D:74:BC:41:05:B4:0E:77:EA:08:5B:A0:26:DB:EE:C3:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMaADXS8QQW0DnfqCFugJtvuw18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/qTI02kxu-Vgs1RCNkQ_UsobKHQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.232.0/23
Signature Algorithm: sha256WithRSAEncryption
48:68:f9:5c:4d:2d:38:46:f2:6b:c2:07:e3:11:c5:92:35:ec:
bc:53:37:3e:b7:46:c8:ba:11:f1:fd:df:30:d2:b7:a7:c1:21:
0f:61:6e:19:eb:ed:6d:57:a5:a3:b7:75:83:dc:aa:85:86:2f:
41:28:b9:44:71:92:bf:25:18:5a:56:3e:7c:71:67:c8:b8:34:
aa:76:cf:6d:74:de:29:cc:f1:2b:71:0b:41:80:2b:22:8e:f6:
1a:3d:b4:50:56:10:6e:31:5a:07:64:e0:98:27:f7:f0:ab:88:
38:95:f4:bf:44:46:2a:8b:29:4a:bc:f4:4b:e8:0e:de:8c:9d:
0b:0a:dc:3e:c1:e6:81:67:c0:f6:c7:98:36:f4:7a:56:b6:8d:
6a:f2:a0:cd:ef:4c:20:bc:92:bd:ce:6c:f2:98:95:b7:7a:43:
78:88:d9:7c:86:71:25:52:2b:4e:25:a9:0c:e4:d8:47:a0:7d:
ff:59:b5:c8:56:2a:41:18:a6:f5:ea:d0:ba:f2:84:86:cf:e5:
8f:f0:64:9c:1e:59:5b:bf:c9:48:61:ce:d1:0c:06:79:25:20:
2d:01:cf:fc:f2:51:00:d7:a1:d1:27:db:b8:7a:8e:f1:c3:b5:
a8:bc:a8:ee:52:4b:c3:1c:e6:e7:3c:d9:d2:d1:0b:c5:c6:cc:
02:4e:12:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 16:05:33 2025 by rpki-client